relocating tmp files?

Greetings, I have been under the apparently false presumption that spamd prcessed its messages in memory (perhaps this explains why each spamd process can oft take up to 25% cpu?). I recently looked in /tmp and found lots of left over spamassassin..xx.tmp files (the first four x's ar

Re: subject_tag and _AUTOLEARN_ not working?

At 06:44 PM 10/14/2004, Matt Kettler wrote: >Is there any reason that the _AUTOLEARN_ tag isn't getting replaced with "no", "ham", or "spam"? Or is there something with my distribution's setup that's causing this? If report_safe is not set to 0, SA won't do that, it will only honor _SCORE_ and

Re: Windows and SA

Correction, Winspamc is written in VB6. My setup is a modified version of that and I use two SA servers in a semi load balancing between them. I will have to say, this method works well, because the cygwin one can go down from time to time, and this keeps the spam at bay :^D I've seen com com

Re: subject_tag and _AUTOLEARN_ not working?

At 06:32 PM 10/14/2004, Chris Frederick wrote: Hi everyone, I have these two lines in my .spamassassin/user_prefs file: rewrite_subject 1 subject_tag [ Spam: _HITS_ Auto Learn: _AUTOLEARN_ ] But when it's actually run it ends up like this: $ cat .maildir/.Junk/cur/1097701214 | spamc Subject: [ Sp

subject_tag and _AUTOLEARN_ not working?

Hi everyone, I have these two lines in my .spamassassin/user_prefs file: rewrite_subject 1 subject_tag [ Spam: _HITS_ Auto Learn: _AUTOLEARN_ ] But when it's actually run it ends up like this: $ cat .maildir/.Junk/cur/1097701214 | spamc Subject: [ Spam: 05.14 Auto Learn: _AUTOLEARN_ ] ... Is th

Re: SA 2.64

At 03:11 PM 10/14/2004, Mario Sergio Candian wrote: when i run spamassassin --lint -D, SA get these directorys: debug: using "/usr/local/share/spamassassin" for default rules dir debug: using "/usr/local/etc/mail/spamassassin" for site rules dir debug: using "/root/.spamassassin" for user state dir

testing SA

Hi guys, i have other question, how i can to test the SA, sending a spam email? i need to do that for look if the "required_hits" is default (5.0) or not. Mario Sergio

Re: SA 2.64

when i run spamassassin --lint -D, SA get these directorys: debug: using "/usr/local/share/spamassassin" for default rules dir debug: using "/usr/local/etc/mail/spamassassin" for site rules dir debug: using "/root/.spamassassin" for user state dir debug: using "/root/.spamassassin/user_prefs" for

RE: Sa-learn error

> On Thu, Oct 14, 2004 at 08:37:05AM +0200, Erik Slooff wrote: > > Only recently I've seen this error: > > [08:31] [EMAIL PROTECTED]:/home/erik > sa-learn --sync > --force-expire > > Odd number of elements in hash assignment at > > > /usr/local/lib/perl5/site_perl/5.8.3/Mail/SpamAssassin/BayesSt

Re: SA 2.64

At 03:06 PM 10/14/2004, Mario Sergio Candian wrote: Oks, Thanks Matt. But, you tell me to run spamassassin --lint -D to make sure SA is using /usr/local/etc/mail/spamassassin as the "site rules" directory, if the SA doenst using the .cf files of this directory, how i can do to the SA read the .cf i

Re: SA 2.64

Oks, Thanks Matt. But, you tell me to run spamassassin --lint -D to make sure SA is using /usr/local/etc/mail/spamassassin as the "site rules" directory, if the SA doenst using the .cf files of this directory, how i can do to the SA read the .cf in this directory first? Exists some option that it

Re: Sorry Florida.

On 01 Oct 2004, at 00:57, John Andersen wrote: On Thursday 30 September 2004 07:33 pm, jdow wrote: I figure a tarpit for unsolicited faxes would be performing a socially good thing. Somebody ought to do it. Strongly agree... Maybe you could make it a plug in to hylafax. No Callerid = tarpit. Caller

feedback mechanism plugins (fwd)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Forwarding for Eric -- this would be a nifty open source tool to have, and I'm sure there may be a few people who could help out. ;) - --j. From: "Eric S. Johansson" > > unfortunately, the fellow I had lined up for doing the Thunderbird and > pos

RE: Windows and SA

You wouldn't have to run it the same way... If you check the wiki, there's an option to integrate it with Exchange, which in your case might be better. Or see http://www.spamblogging.com/archives/69.html which describes how to do it.   Essentially, to run it as you do now, you'd need somethi

=?utf-7?q?RE: Windows and SA?=

Use CygWin to enable all the features of SpamAssassin. A pure Win32 SpamAssassin cannot do many of the test like DCC, Razor2, Pyzor, etc... Instructions on installing SA under CygWin are hidden at: http://www.yourtech.net/documents/cw-sa/ Then you could use the compiled SpamC.exe it generates.

Re: odd scores..

Jeremy wrote: I was checking the logs on our qmail (4.9) box running SA (2.60) and in the logs I am getting a large number of messages with score (?/?) Oct 14 10:47:56smtpgate1 qmail-scanner[83917]: Clear:RC:0(xxx.xxx.xxx.xxx):SA:0(?/?): Oct 14 10:50:03sm

Re: odd scores..

Jeremy wrote: I was checking the logs on our qmail (4.9) box running SA (2.60) and in the logs I am getting a large number of messages with score (?/?) Oct 14 10:47:56smtpgate1 qmail-scanner[83917]: Clear:RC:0(xxx.xxx.xxx.xxx):SA:0(?/?): Oct 14 10:50:03smt

odd scores..

I was checking the logs on our qmail (4.9) box running SA (2.60) and in the logs I am getting a large number of messages with score (?/?) Oct 14 10:47:56smtpgate1 qmail-scanner[83917]: Clear:RC:0(xxx.xxx.xxx.xxx):SA:0(?/?): Oct 14 10:50:03smtpgate1 q

Re: SA 2.64

At 02:16 PM 10/14/2004, Mario Sergio Candian wrote: i installed the SA 2.64 with qmail, vpopmail, qmail-scanner, etc... I have one question. I have three files in /usr/local/etc/mail/spamassasin (local.cf, br_rules.cf and relatorio_msg.cf). I need SA read the local.cf and the others files br_rules

Re: Windows and SA

Bill Ervin said: > We currently run SA on a linux server that is maintained by a consultant > because I am a windows server guy and know nothing about linux. It is > setup as a relay in front of our exchange box. I am looking to > configure it the same way for w2k. Obviously it can't be configu

Windows and SA

We currently run SA on a linux server that is maintained by a consultant because I am a windows server guy and know nothing about linux.  It is setup as a relay in front of our exchange box.  I am looking to configure it the same way for w2k.   I have installed SA 3.0 and pearl 5.8.4 buil

SA 2.64

Hi guys, i installed the SA 2.64 with qmail, vpopmail, qmail-scanner, etc... I have one question. I have three files in /usr/local/etc/mail/spamassasin (local.cf, br_rules.cf and relatorio_msg.cf). I need SA read the local.cf and the others files br_rules and relatorio_msg.cf. How i can do it? M

RE: Sending all spam to one email box.

I am also having the same issue. Nothing is going to my spam box. I am trying to setup a sitewide (/etc/procmailrc) configuration with SA, Postfix, and Procmail. SA and postfix are doing their job but I can't get procmail to tag mail and send it locally. I have setup postfix using transport's for

Was there a BAD SA-BLACKLIST rule file published on oct 10 th or 11th

Hi! I'm using spamassassin 2.63-1, amavisd-new 20030616-p9 on RedHat 9.0 and it worked correctly But, today I received complaints from my users about unreceived mails on last monday Oct-11th. While looking at my postfix logfile, I noticed that the rule USER_IN_BLACKLIST has been triggered 2 t

Re: Spamassassin Proxy - Help need.

Phil Ellett wrote: I have been using Spamassassin for years via Sendmail / Procmail / Spamd for scanning incoming mail directly into mailboxes without problems. I now however for one client wish to receive email via Sendmail, scan it with spamassassin and then forward it via smtp to another server.

Spamassassin Proxy - Help need.

I have been using Spamassassin for years via Sendmail / Procmail / Spamd for scanning incoming mail directly into mailboxes without problems. I now however for one client wish to receive email via Sendmail, scan it with spamassassin and then forward it via smtp to another server. Does anyone have

Re: force expire problem

At 01:16 PM 10/14/2004, German Staltari wrote: Hi, i have some problems expiring the BAyes DB. Here is the --force-expire output. The output is always the same. SA 3.0 rc2 version. First: There's some bayes related bugs fixed between rc2 and SA 3.0 final. You really should consider upgrading... RC

Re: SA 3.0/Failed Test

At 07:24 AM 10/14/2004, BG Mahesh wrote: How do I fix this problem? Remember when the "perl Makefile.pl" warned you that checking network rules could cause make test to fail, but you turned them on anyway? Check network rules during 'make test' (test scripts may fail due to network pro

force expire problem

Hi, i have some problems expiring the BAyes DB. Here is the --force-expire output. The output is always the same. SA 3.0 rc2 version. Any help would be appreciated TIA German Staltari debug: bayes: Database connection established debug: bayes: found bayes db version 3 debug: bayes: Using userid:

Re: Time based rules

> Would it be worthwhile to combine geography and time? Might, might not. At work most business mail arrives between 7am and 6pm, with corporate news distributions and the like arriving between 10pm and 2am. At home a lot of real stuff starts showing up at 4am or so, and it trails off around 4am

Re: Default SURBL scores low?

On Thu, Oct 14, 2004 at 09:05:56AM -0700, Robin Lynn Frank wrote: > simply uncomment those we need to change. In other words, we do find a > greater need to increase scores. They may be statistically valid, but > there may also be a reason the phrase, "lies, damn lies and statistics", > was utter

Re: Default SURBL scores low?

> However, I noticed after upgrading that many spams that are tagged with > SURBL checks are still scoring below threshold. Some reasons > contributing to the lower score, as I see it are: > > -3.3 ALL_TRUSTED Most of these unmarked spams hit ALL_TRUSTED with a > default score of -3.3. It almost co

RE: Time based rules

Fred wrote: > Matt Kettler wrote: >> Looking at my MRTG graphs, spam-rate is pretty much a constant here. > > Same here, it's about 1,200-1,400 per hour for us. This stays constant 24 > hours a day for us. In the past 48 hours, the lowest point was 11pm on Oct. > 13th with only 800 spam, and the

Re: Time based rules

At 11:58 AM 10/14/2004, Martin Hepworth wrote: Last time I looked at spam rate it dipped Mon-Tues then picked up again and tended to be US eastern time Interesting, my graphs over the past 3 weeks tend to peak on Weds, roll off steadily hitting a low on Sunday, then ramp back up Monday and Tuesda

RE: spamassassin and user whitelist/blacklist prefs

> -Original Message- > From: ip.guy [mailto:[EMAIL PROTECTED] > Sent: Wednesday, October 13, 2004 5:50 PM > To: [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED] > Subject: Re: spamassassin and user whitelist/blacklist prefs > > > ip.guy wrote: > > > hi > > > > my qmail server only acts as the

Re: Time based rules

Matt Kettler wrote: > Looking at my MRTG graphs, spam-rate is pretty much a constant here. Same here, it's about 1,200-1,400 per hour for us. This stays constant 24 hours a day for us. In the past 48 hours, the lowest point was 11pm on Oct. 13th with only 800 spam, and the high point of 10pm on

Re: Default SURBL scores low?

On Thu, 14 Oct 2004 11:44:59 -0400 Theo Van Dinter <[EMAIL PROTECTED]> wrote: > On Thu, Oct 14, 2004 at 08:27:02AM -0700, Potato Chip wrote: > > -3.3 ALL_TRUSTED Most of these unmarked spams hit ALL_TRUSTED with a > > default score of -3.3. It almost completely discounts the SURBL > > score hits.

Re: Time based rules

Matt Kettler wrote: At 05:16 AM 10/14/2004, RPICKERING wrote: I was just thinking that most (95%) of our legitimate email comes in during office hours (8am - 7pm GMT) and a lot of spam comes in overnight (probably when the spammers in the rest of the world wake up and start doing business). So I wa

Re: OT: Ninja Blanket

Kenneth Porter wrote: Was browsing ThinkGeek just now (looking for the Swiss Army USB memory fob) and noticed they have a "Ninja Blanket" on the home page: I, for one, miss the ninjas on the SA website. -- Michael H. Collins Admiral, Penguin

Re: Default SURBL scores low?

At 11:27 AM 10/14/2004, Potato Chip wrote: -3.3 ALL_TRUSTED Most of these unmarked spams hit ALL_TRUSTED with a default score of -3.3. It almost completely discounts the SURBL score hits. If you have spams that are matching ALL_TRUSTED, you've got trust path problems. That really should only be fi

Re: Time based rules

At 05:16 AM 10/14/2004, RPICKERING wrote: I was just thinking that most (95%) of our legitimate email comes in during office hours (8am - 7pm GMT) and a lot of spam comes in overnight (probably when the spammers in the rest of the world wake up and start doing business). So I was wondering if there

Re: Default SURBL scores low?

On Thu, Oct 14, 2004 at 08:27:02AM -0700, Potato Chip wrote: > -3.3 ALL_TRUSTED Most of these unmarked spams hit ALL_TRUSTED with a > default score of -3.3. It almost completely discounts the SURBL score > hits. If you're getting ALL_TRUSTED hits on messages that came from the outside through a no

OT: Ninja Blanket

Was browsing ThinkGeek just now (looking for the Swiss Army USB memory fob) and noticed they have a "Ninja Blanket" on the home page:

Default SURBL scores low?

I try not to second guess SA's default scores. I understand some work goes into creating those default scores. However, I noticed after upgrading that many spams that are tagged with SURBL checks are still scoring below threshold. Some reasons contributing to the lower score, as I see it are: -3.

Re: Rewriting Subject

At 10:09 AM 10/14/2004, Joe Aldeguer wrote: I just installed SA 3.0 on RH 3.0, inside my local.cf file I have the following: required_hits 5 rewrite_subject 1 rewrite_header Subject SPAM: is this the right way to modify the subject of all tagged messages as spam for 3.0? Remove the the "rewrite_sub

Rewriting Subject

I just installed SA 3.0 on RH 3.0, inside my local.cf file I have the following: required_hits 5 rewrite_subject 1 rewrite_header Subject SPAM: is this the right way to modify the subject of all tagged messages as spam for 3.0? In the past using SA 2.64 I used subject_tag SPAM: Thank you, Joe

Re: Sa-learn error

On Thu, Oct 14, 2004 at 08:37:05AM +0200, Erik Slooff wrote: > Only recently I've seen this error: > [08:31] [EMAIL PROTECTED]:/home/erik > sa-learn --sync --force-expire > Odd number of elements in hash assignment at > /usr/local/lib/perl5/site_perl/5.8.3/Mail/SpamAssassin/BayesStore.pm line > 316

RE: I am getting Argument "" isn't numeric

Hi, Was this problem happened in SpamAssassin 3.0 or early version? I saw the same issue with SpamAssassin 3.0, it complained: Argument "n.nn" isn't numeric in addition (+) at /usr/local/lib/perl5/site_perl/5.8.4/Mail/SpamAssassin/Conf.pm line 238. However, I have the "bayes_auto_learn" line se

Re: SA 3.0/Failed Test

Hi, On Thu, 14 Oct 2004 16:54:04 +0530 "BG Mahesh" <[EMAIL PROTECTED]> wrote: > I am trying to install SA 3.0 on RedHat linux. During testing the error > I get is, > > % make test > [dnsbl test failures] > > How do I fix this problem? What does: perl -e 'use Net::DNS; print $Net::DNS::VERSIO

Some fake mails, ham-trainers?

I have received 3 fake mails claiming to be from myredtrap.com, with the following ip numbers (twice on the first one): Received: from unknown (HELO www.myredtrap.com) (212.240.72.97) Received: from unknown (HELO www.myredtrap.com) (212.21.97.209) They are guaranteed spam, since the To: field doesn

RE: Spamassassin -D --lint question

Thanks. Ron Ron Nutter [EMAIL PROTECTED] Network Manager Information Technology Services(502)863-7002 Georgetown College Georgetown, KY

Re: feeding frenzy for ws.surbl.org!!!

> On Wed, 13 Oct 2004 10:41:07 -0400, Chris Santerre wrote: >> There had been a short time where we had posts that began with [RD] for >> rule >> discussion. But we just aren't seeing much of anything new to write >> rules >> on. I'm REAL interested in any spam that slips by for people who use >> S

SA 3.0/Failed Test

hi I am trying to install SA 3.0 on RedHat linux. During testing the error I get is, % make test PERL_DL_NONLAZY=1 /usr/bin/perl "-MExtUtils::Command::MM" "-e" "test_harness(0, 'blib/lib', 'blib/arch')" t/*.t t/bayesdbm..skipped all skipped: no reason given t/bayesdbm_

[RD] incorrect real name (was Re: feeding frenzy for ws.surbl.org!!!)

On Thu, 14 Oct 2004 08:51:56 +0200, John Wilcock wrote: > In particular, I have an idea for the To field: > > | To: "judson burrows" <[EMAIL PROTECTED]> > > My name isn't "judson burrows", or Ophelia Rrnyihie, or "edmond olivio", > or any of the numerous similar names spammers have addressed me a

Time based rules

I was just thinking that most (95%) of our legitimate email comes in during office hours (8am - 7pm GMT) and a lot of spam comes in overnight (probably when the spammers in the rest of the world wake up and start doing business). So I was wondering if there was any way SpamAssassin could evaluate t

spamc/spamd or spamassassin

Hello, I installed the new version 3.0.0 of SA. I tried to run as spamd/spamc but somehow there is no flag in the mailheader that indicates it has beeing checked. When I changes the spamc call in procmailrc to spamassassin then it all works fine. Has anyone an idea what this problem could be In

Re: feeding frenzy for ws.surbl.org!!!

On Wed, 13 Oct 2004 10:41:07 -0400, Chris Santerre wrote: > There had been a short time where we had posts that began with [RD] for rule > discussion. But we just aren't seeing much of anything new to write rules > on. I'm REAL interested in any spam that slips by for people who use SARE > rules. I

Sa-learn error

Hi, Only recently I've seen this error: [08:31] [EMAIL PROTECTED]:/home/erik > sa-learn --sync --force-expire Odd number of elements in hash assignment at /usr/local/lib/perl5/site_perl/5.8.3/Mail/SpamAssassin/BayesStore.pm line 316. Use of uninitialized value in list assignment at /usr/local/lib/

Re: spamassassin and user whitelist/blacklist prefs

ip.guy wrote: hi my qmail server only acts as the spam/av gateway server to our internal MS server(s). i need to allow users, with mail accounts on our internal server(s), to access the whitelist/blacklist functions of spamassassin but without seeing the entire list, i'm only interested in allo

RE: [ot] If you see this domain in spam....

Actually I think that the use of subliminal messages and sales techniques (which includes hypnotic patterns) is against the law in the US. If I recall this was brought up in the news in the 80's. Gary -Original Message- From: Jeff Chan [mailto:[EMAIL PROTECTED] Sent: Wednesday, Octobe